I handed the epoll UAF to an agent
Article by Guy Beck about using Claude for porting an exploit for an eventpoll vulnerability to Android.
guysrd.github.io/epoll-uaf-agent
Linux Kernel Security
@linkersec
Joined September 2021
- IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Article about exploiting a racy stack use-after-free in the futex implementation. The bug was used to pwn a kernelCTF instance. nebusec.ai/research/ionst…
- Januscape: Guest-to-Host Escape in KVM/x86 @v4bel published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected. github.com/V4bel/Januscap…
- ITScape: Guest-to-Host Escape in KVM/arm64 Article by @v4bel about exploiting a race condition bug in the KVM driver on the arm64 architecture to escape the guest VM. github.com/V4bel/ITScape
- Bad Epoll: The bug missed by Mythos Article by Jaeyoung Chung about exploiting CVE-2026-46242 — a race condition bug in the eventpoll subsystem. Jaeyoung exploited this bug to claim a kernelCTF entry, but the vulnerability also affects Android kernels. github.com/J-jaeyoung/bad…
